Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft
File:                     eEGgmdwU4pNx5MwYVIn_riEyI0k.mft (raw, json)
Hash identifier:          7vUwEP7KVSS4BiIiYJpj7Bv8hxahR8n6I9woWazWBB4=
Subject key identifier:   38:7A:45:94:98:C3:D8:7A:A8:B8:C4:3E:85:AE:07:68:71:F7:52:C1
Authority key identifier: 78:41:A0:99:DC:14:E2:93:71:E4:CC:18:54:89:FF:AE:21:32:23:49
Certificate issuer:       /CN=A91F8966/serialNumber=7841A099DC14E29371E4CC185489FFAE21322349
Certificate serial:       091E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgmdwU4pNx5MwYVIn_riEyI0k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft
Manifest number:          0918
Signing time:             Thu 30 Jan 2025 20:24:10 +0000
Manifest this update:     Thu 30 Jan 2025 20:24:09 +0000
Manifest next update:     Thu 06 Feb 2025 20:24:09 +0000
Files and hashes:         1: eEGgmdwU4pNx5MwYVIn_riEyI0k.crl (hash: NMNel7Jw+FJR8iXlJFD4P7nyoo9XrNtgrZJ+T6PnXCc=)
                          2: CA4C06CA976711EAA651F944C4F9AE02.roa (hash: bloQYzrAn+4ONkIrVOLLF4mqOoi8QLeVq0prE6sonCo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2334 (0x91e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8966/serialNumber=7841A099DC14E29371E4CC185489FFAE21322349
        Validity
            Not Before: Jan 30 20:24:09 2025 GMT
            Not After : Feb  6 20:24:09 2025 GMT
        Subject: CN=679bdfe9-2f15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:75:15:47:5f:96:68:8b:7d:95:9c:55:70:45:
                    61:b3:32:33:66:7f:9d:3d:b5:10:bd:2b:d4:a6:62:
                    41:73:93:1f:8f:65:37:ed:70:9f:05:39:1f:cd:d4:
                    21:ff:71:19:20:27:e8:66:7e:f0:ad:93:36:d0:2a:
                    b8:07:e5:90:84:6e:09:d9:c5:7f:75:c5:e2:ce:88:
                    f9:33:0f:25:7a:4f:5d:ed:ef:38:d1:ef:2f:f3:06:
                    e7:a4:5d:68:5d:ba:ce:89:83:29:1a:73:44:30:7d:
                    6e:1a:d2:39:65:05:2b:b4:ba:b0:f4:c5:24:ce:3a:
                    a4:d0:a3:e0:3c:1b:2a:f2:94:7a:ad:b2:06:64:1e:
                    cd:bc:cd:8f:63:5b:fc:9a:e9:0c:82:e3:75:cc:37:
                    37:33:e6:e2:1d:d7:0f:43:22:74:5c:fd:ef:41:dc:
                    9d:db:f4:74:b9:8c:3d:0f:8d:e3:f9:20:86:f1:94:
                    68:4b:53:ac:d6:39:4e:7f:82:8f:b4:b4:34:01:74:
                    2b:de:83:20:5f:e4:75:35:07:cc:f1:7d:5d:76:3c:
                    95:df:97:46:34:a8:fe:b9:de:2e:87:ac:f1:e0:84:
                    01:79:d5:79:c3:2b:13:9c:e4:55:03:a5:54:ec:39:
                    0c:94:61:ae:32:36:87:8a:97:a8:51:c6:e9:83:f6:
                    19:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:7A:45:94:98:C3:D8:7A:A8:B8:C4:3E:85:AE:07:68:71:F7:52:C1
            X509v3 Authority Key Identifier:
                keyid:78:41:A0:99:DC:14:E2:93:71:E4:CC:18:54:89:FF:AE:21:32:23:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgmdwU4pNx5MwYVIn_riEyI0k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e7:fb:82:ea:9b:94:d3:11:ba:3a:c6:b8:b4:c4:2c:bb:9d:60:
         80:5e:38:e1:47:40:62:f4:aa:35:4a:62:c3:94:75:7f:57:9e:
         fb:0b:c6:7f:d6:6d:59:2c:a3:bb:5a:26:bc:5c:e5:56:91:c1:
         25:5b:5e:aa:02:0c:c1:7a:95:da:65:df:fb:44:ea:27:aa:57:
         6c:b9:ae:80:e5:d2:5e:9f:6c:f9:ff:98:68:94:8a:4a:47:ec:
         eb:c2:61:a1:eb:fb:11:a5:9f:c8:6e:d8:93:24:65:31:06:36:
         2f:08:8c:23:68:a2:d8:55:7a:37:9a:20:7f:d6:26:cd:00:33:
         ba:0e:a8:95:57:ec:d1:53:6c:42:69:03:22:7f:3d:c9:be:31:
         41:2a:36:38:da:57:76:13:5d:80:ea:14:59:22:2f:1e:46:ea:
         cf:a6:fd:4c:70:52:78:bd:98:81:b3:04:31:1b:ba:2e:a4:16:
         64:d0:0b:1f:41:f9:5c:45:94:24:88:10:db:c5:51:1e:c6:58:
         e8:73:d5:67:1e:cc:10:65:3f:34:6f:36:6e:a0:62:42:7a:fb:
         c7:8d:b8:19:2b:59:fb:69:58:42:d2:1b:2a:8b:59:41:19:3f:
         dd:13:f6:7f:d3:2e:7d:8a:0d:b8:69:81:ed:af:25:e7:a0:8d:
         4d:12:ce:2c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjg5NjYxMTAvBgNVBAUTKDc4NDFBMDk5REMxNEUyOTM3MUU0Q0MxODU0ODlGRkFF
MjEzMjIzNDkwHhcNMjUwMTMwMjAyNDA5WhcNMjUwMjA2MjAyNDA5WjAYMRYwFAYD
VQQDEw02NzliZGZlOS0yZjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArnUVR1+WaIt9lZxVcEVhszIzZn+dPbUQvSvUpmJBc5Mfj2U37XCfBTkfzdQh
/3EZICfoZn7wrZM20Cq4B+WQhG4J2cV/dcXizoj5Mw8lek9d7e840e8v8wbnpF1o
XbrOiYMpGnNEMH1uGtI5ZQUrtLqw9MUkzjqk0KPgPBsq8pR6rbIGZB7NvM2PY1v8
mukMguN1zDc3M+biHdcPQyJ0XP3vQdyd2/R0uYw9D43j+SCG8ZRoS1Os1jlOf4KP
tLQ0AXQr3oMgX+R1NQfM8X1ddjyV35dGNKj+ud4uh6zx4IQBedV5wysTnORVA6VU
7DkMlGGuMjaHipeoUcbpg/YZnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDh6RZSY
w9h6qLjEPoWuB2hx91LBMB8GA1UdIwQYMBaAFHhBoJncFOKTceTMGFSJ/64hMiNJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODk2Ni8zRUYyMjQwMjk3
NjYxMUVBOUVCNDk1NDJDNEY5QUUwMi9lRUdnbWR3VTRwTng1TXdZVkluX3JpRXlJ
MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VFR2dtZHdVNHBOeDVNd1lWSW5fcmlFeUkway5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
ODk2Ni8zRUYyMjQwMjk3NjYxMUVBOUVCNDk1NDJDNEY5QUUwMi9lRUdnbWR3VTRw
Tng1TXdZVkluX3JpRXlJMGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDn+4Lqm5TTEbo6xri0xCy7nWCAXjjhR0Bi9Ko1SmLDlHV/V577C8Z/
1m1ZLKO7Wia8XOVWkcElW16qAgzBepXaZd/7ROonqldsua6A5dJen2z5/5holIpK
R+zrwmGh6/sRpZ/IbtiTJGUxBjYvCIwjaKLYVXo3miB/1ibNADO6DqiVV+zRU2xC
aQMifz3JvjFBKjY42ld2E12A6hRZIi8eRurPpv1McFJ4vZiBswQxG7oupBZk0Asf
QflcRZQkiBDbxVEexljoc9VnHswQZT80bzZuoGJCevvHjbgZK1n7aVhC0hsqi1lB
GT/dE/Z/0y59ig24aYHtryXnoI1NEs4s
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:29:39 2025 by rpki-client